CVE-2025-0726
Feb. 21, 2025, 8:15 a.m.
None
No Score
Description
In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before
version 6.4.2, an attacker can cause a denial of service by specially
crafted packets. The core issue is missing closing of a file in case of
an error condition, resulting in the 404 error for each further file
request. Users can work-around the issue by disabling the PUT request
support.
Product(s) Impacted
| Product | Versions |
|---|---|
| Eclipse ThreadX NetX Duo |
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
CWE-459
Incomplete Cleanup
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.
Tags
Date
- Published: Feb. 21, 2025, 8:15 a.m.
- Last Modified: Feb. 21, 2025, 8:15 a.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
emo@eclipse.org
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.